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DETAILED ACTION 

1. Claims 30-38 are pending, 

2. Amendment filed 12/11/2006 has been received and 
considered. 

Claim Objections 

3. The filed amendment overcomes the previously presented 
claim objections. 

Claim Rejections - 35 USC §102 

4. The following is a quotation of the appropriate paragraphs 
of 35 U.S.C. 102 that form the basis for the rejections under 
this section made in this Office action: 

A person shall be- entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or 
a foreign country or in public use or on sale in this country, more than one 
year prior to the date of application for patent in the United States. 

5. Claims 30, 33-36 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Norton (Norton Antivirus for Windows 95/98. 
User' s Guide) . 

As per claims 30 and 33, Norton discloses a security system 
comprising: an activation token identifying system 
characteristics and specifying a threat level and at least one 
preset activation measure, wherein a system characteristic is 
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one of the group of a hardware system, a service, a 
configuration of a service, a service execution platform, and a 
service session (see pages 37-40); a first system configured to 
at least review security and vulnerability information form 
information publishers and to provide the activation token based 
on filtered seicurity and vulnerability information (see pages 
37-40 and page 56); and a second system configured to determine 
whether the activation token is relevant by checking if actual 
characteristics at the second system correspond to the system 
characteristics identified by the activation token, the second 
system further configured to transform the activation token into 
at least one activation measure if the activation token is 
-considered ' relevant by the second system the activation measure 
configured to modify services executing at the second system 
(see pages 37-40) wherein the first system is further configured 
to automatically filter the security and vulnerability 
information relevant to the system characteristics identified by 
the activation token (see pages 40 and 22). 

As per claim 34, Norton discloses a list of trusted service 
providers from whom activation tokens are accepted by the second 
system (see pages 37-40) . 
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As per claim 35, Norton disclose the at least one preset 
activation measure is shutting down a service affected by the 
specified threat level (see pages 29-30) . 

As per claim 36, Norton discloses the at least one preset 
activation measure is reconfiguring the functionality of a 
service affected by the specified threat level (see pages 29-31 
and pages 37-40) . 

Claim Rejections - 35 USC §103 

6. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in this 
Office action: 

(a) A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if the 
differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

7. .Claim 32 is rejected under 35 U.S.C. 103(a) as being 
unpatentable over Norton as applied to claim 30 above, in view 
of Bates et al (US 6721721) . 

As per claim 32, Norton fails to disclose cryptographic 
means configured to verify at the second system that the first 
system is a trusted service. 
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However, Bates et al teaches the use of cryptographic 
verification (see column 14 line 62 through column 15 line 8) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art to use cryptographic 
verification in the Norton system. 

Motivation to do so would have been to authenticate the 
information and the sender of the information (see Bates et al 
column 14 line 62 through column 15 line 8). 

8. Claims 32 and 38 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Norton as applied to claim 30 above, in 
view of Levi (US 6636983) . 

As per claims 32 and 38, Norton fails to disclose reporting 
or alerting an administrator of the activation measures. 

However, Levi teaches the notification of an administrator 
upon activation measures (see column 12 lines 10-19) . 

At the time of the invention it would have been obvious to . 
a person of ordinary skill in the art to report an administrator 
of the activation measures in the Norton system. 

Motivation to do so would have been to track the changes to 
the system (see column 12 lines 10-19) . 

9. Claim 37 is rejected under 35 U.S.C. 103(a) as being 
unpatentable over Norton as applied to claim 30 above, in view 
of Waldin et al (US 6651249). 
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As per claim 37, Norton fails to disclose installing a 
patch. 

However, Waldin et al teaches the installation . of a patch 
(see column 4 lines 25-60) . 

At the time of the invention it would have been obvious to 
a person of ordinary skill in the art for an activation measure 
in Norton to be the installation of a patch. 

Motivation to do so would have been to transform a previous 
version of the software application to the current version (see 
column 4 lines 25-60) . 

Response to Arguments 

10. Applicant's- arguments filed 04/22/2006 have been fully, 
considered but they are not persuasive. Applicant argues that 
Norton fails to disclose one of the specific system 
characteristics; Norton fails to disclose specifying a threat 
level; Norton fails to disclose at least one preset activation 
measure; Norton fails to disclose the activation token is based 
on security and vulnerability information from information 
publishers; Norton fails to disclose the limitation's of claim 
33; and there is no motivation to authenticate the serve or any 
entity in the system because they are all trusted. 
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With respect to Applicant's that Norton fails to disclose 
one of the specific system characteristics, Norton at least 
discloses "a service" because the system must the Norton virus 
scanner in order to obtain and use the virus definition updates; 
"a configuration of a service" and "a .service version" because 
the configuration and version of the Norton virus scanner 
correspond to the current virus definitions in the system. 
Applicant further argues (on page 6) that a virus cannot 
constitute a system characteristic, however, the virus 
definitions, which are different from the actual viruses, are at 
least part of the system characteristic. 

With respect to Applicant's argument that Norton fails to 
disclose specifying a threat level, as disclosed on page 38 
Norton discloses that when a major threat (i.e. a higher threat 
level than previous levels) is discovered the system will email 
the user in order to update the virus "definitions and these 
definitions fixing the major threat are downloaded from via 'the 
email using the LiveUpdate. Therefore, Norton discloses an 
activation token specifying a threat level. Applicant's further 
give examples from the specification as to what constitutes a 
threat level, although the claims are interpreted in light of 
the specification, limitations from the specification are not 
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read into the claims. See In re Van Geuns, 988 F.2d 1181, 26 
USPQ2d 1057 (Fed. Cir. 1993). 

With respect to Applicant's argument that Norton fails to 
disclose at least one preset activation measure, the virus 
definitions give the virus scanner the information needed to 
find the virus and remove the virus. Therefore, this scanning 
for and removing of a virus is the at least one preset 
activation measure. Furthermore, on page 40 Norton discloses 
the specific scanning of the system with the new definitions in 
order to make sure newly discovered viruses are found. 

With respect to Applicant's argument that Norton fails to 
disclose the activation token is based on security and 
vulnerability information from information publishers, Applicant 
is directed to page 56 titled "Creating a Virus' Sample Floppy 
Disk" which discloses that users (i.e. information publishers) 
can send files suspected of being infected with a virus to 
Symantec (Norton) and they will scan it and determine if a virus 
is contained. If there is a virus Symantec (Norton) with create 
a new virus definition. It is also well known in the art the 
when a virus detection company finds a new virus it will publish 
this information and the antivirus companies like Symantec 
(Norton) will create new virus definitions to remove these 
viruses . 
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With respect to Applicant's argument that Norton fails to 
disclose the limitations of claim 33 as discussed above, when 
the new definitions are received the system is scanned for 
viruses based on the new definitions (see page 40) . 
Furthermore, Norton, allows the scanner to be set up for 
automatic scanning (see page 22). 

With respect to Applicant's argument that there is no 
motivation to authenticate the server or any entity in the 
system because they are all trusted, there is no doubt that the 
LiveUpdate servers are intended to be trusted, but there is 
nothing stopping someone from spoofing a trusted server. 
Furthermore, on page 39, Norton discloses obtaining updates 
without LiveUpdate from such things as bulletin boards and it is 
clear that these locations are not guaranteed to be trusted and 
the authentication of the information and sender ,would be 
greatly desired to improve the security to ensure that each the 
sender and the received information is trusted. 

Conclusion 

11. THIS ACTION IS MADE FINAL. Applicant is reminded of the 
extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action 
is set to expire THREE MONTHS from the mailing date of this 
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action. In the event a first reply is filed within TWO MONTHS 
of the mailing date of this final action and the advisory action 
is not mailed until after the end of the THREE-MONTH shortened 
statutory period, then the shortened statutory period will 
expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated 
from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than 
SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Michael 
Pyzocha. whose telephone number is (571) 272-3875. The examiner 
can normally be reached on 7:00am - 4:30pm first Fridays of the 
bi-week off. 

If attempts to reach the examiner by telephone- are 
unsuccessful, the examiner's supervisor, Emmanuel Moise can be 
reached on (571) 272-3865. The fax phone number for the 
organization where this application or proceeding is assigned is 
571-273-8300. 
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Information regarding the status of an application may be 
obtained from the Patent Application Information Retrieval 
(PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, 
see http://pair-direct.uspto.gov. Should you have guestions on 
access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 . (toll-free) . If you would 
like assistance from a USPTO Customer Service Representative or. 
access to the automated information system, call 800-786-9199 
(IN USA OR CANADA) or 571-272-1000. 
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